i'll point you to official announcement when it comes out.

>-> Log Message:
>-> authentication mistake in SSHv2 + pubkey, from markus.
>-> REBUILD AND RESTART SSHD NOW.
>-> (vulnerability window for netbsd-current - < 48hours)
>Can you give us more info on this, esp. which versions are affected?

	as stated above, if you are using sshd from netbsd-current,
	built during this 48 hours (depending on timezone, around Feb 7, 8
	and 9) you need to rebuild.  (another way is to check openssh
	version number: if you have sshd that says "2.3.1",
	you need to rebuild)

>Is the sshd in 1.5 affected, for example?

	no.

itojun